MPED-X-Routing-Tender20080721 - Madhya Pradesh State Excise

Security Content:
• Consists of vendor’s original threat intelligence and is not overly dependent on
information available in the public domain.
• Continuously updated with new threat intelligence, including detailed help text, in
an automated fashion and without physical access to the unit.
• Detects and blocks all known, high-risk exploits along with their underlying
vulnerability (not just one exploit of that vulnerability).
• Detects and blocks zero-day attacks without requiring an update.
• Reports provide information on latest security issues, cyber attack trends, and
statistics.
Customization:
• Automatically blocks malicious traffic out-of-the-box and allows additional
blocking upon policy customization.
• Can enable/disable each individual signature.
• Each signature should allow granular tuning.
• Supports assigning of ports to custom applications.
• Filters traffic based on IP address or network range, protocol, and service in
support of organizational security policy to allow/disallow specific types of activity
between hosts.
Updates:
• Supports automated security check and product updates.
• Updates are frequent and regular.
• Vendor provides detailed update history on public web site.
• Security check updates do not require reboot of IPS unit.
Performance Consideration:
• Does not introduce network latency.
• Fails open should a power loss occur.
• Notifies console of unit interruption. Console should receive alert and/or provide
additional notification to administrator should any component become nonoperational
or experience a communications problem.
• The alert should specify the type of problem encountered, and users should have
the ability to enable tracing mechanisms to determine the exact nature of the
issue
Accuracy of Intrusion Detection:
• Accurately detects intrusion attempts and discerns between the various types
and risk levels including unauthorized access attempts, pre-attack probes,
suspicious activity, DoS, DDoS, vulnerability exploitation, brute force, hybrids,
and zero-day attacks.
• Accurately prevent intrusions from occurring. Describe underlying prevention
technology.
66